Microsoft Entra ID (formerly Azure AD)

Microsoft Entra ID (formerly Azure AD) Users.authentication API

The users.authentication API from Microsoft Entra ID (formerly Azure AD) — 44 operation(s) for users.authentication.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 68

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /users/{user-id}/authentication Get a user's authentication root · Get authentication from users #
Ask an LLM
“Where do I see the authentication object that holds all of a user's sign-in method collections?”
“Can I pull a user's authentication container in Microsoft Entra ID and expand its method collections?”
Tell an agent
Get the authentication object for user {user_id}.
Fetch user {user_id}'s authentication root and expand {expand}.
PATCH /users/{user-id}/authentication Update a user's authentication root · Update the navigation property authentication in users #
Ask an LLM
“Can I patch the authentication object on a user to replace several method collections at once?”
“Which method collections can be set when updating a user's authentication container?”
Tell an agent
Update the authentication object on user {user_id} with these phone methods: {phone_methods}.
Patch user {user_id}'s authentication container to set email methods {email_methods}.
DELETE /users/{user-id}/authentication Delete a user's authentication root · Delete navigation property authentication for users #
Ask an LLM
“Is it possible to delete the whole authentication navigation property on a user?”
“What happens if I remove a user's authentication container instead of one sign-in method?”
Tell an agent destructive · confirm first
Delete the authentication navigation property from user {user_id}.
Remove user {user_id}'s entire authentication object, matching ETag {etag}.
GET /users/{user-id}/authentication/emailMethods List a user's email authentication methods · Get emailMethods from users #
Ask an LLM
“Which email address has a user registered for self-service password reset?”
“How do I list the email authentication methods on a user's account?”
Tell an agent
List the email authentication methods registered to user {user_id}.
Show me the password-reset email addresses for {user_id}.
POST /users/{user-id}/authentication/emailMethods Register an email authentication method · Create emailMethod #
Ask an LLM
“How do I add a password reset email address to a user in Entra ID?”
“Can a user have more than one email authentication method registered?”
Tell an agent
Register {email} as the authentication email for user {user_id}.
Add a new self-service password reset email {email} to {user_id}.
GET /users/{user-id}/authentication/emailMethods/{emailAuthenticationMethod-id} Get one email authentication method · Get emailMethods from users #
Ask an LLM
“What email address is stored on a specific email authentication method for a user?”
“Can I look up a single email method by its ID on a user?”
Tell an agent
Get email authentication method {method_id} for user {user_id}.
Show the details of email method {method_id} on {user_id}.
PATCH /users/{user-id}/authentication/emailMethods/{emailAuthenticationMethod-id} Change a user's authentication email address · Update emailAuthenticationMethod #
Ask an LLM
“Can I change the email address on an existing email authentication method for a user?”
“Is updating a user's reset email supported as a self-service operation?”
Tell an agent
Change email method {method_id} on user {user_id} to {email}.
Update the existing reset email for {user_id} (method {method_id}) to {email}.
DELETE /users/{user-id}/authentication/emailMethods/{emailAuthenticationMethod-id} Remove a user's email authentication method · Delete emailAuthenticationMethod #
Ask an LLM
“How do I remove a user's password reset email address?”
“Can I delete an email authentication method so the user can't reset their password by email?”
Tell an agent destructive · confirm first
Delete email authentication method {method_id} from user {user_id}.
Remove the reset email method {method_id} for {user_id}.
GET /users/{user-id}/authentication/emailMethods/$count Count a user's email authentication methods · Get the number of the resource #
Ask an LLM
“How many email authentication methods does a user have registered?”
“Does this user have any reset email registered at all?”
Tell an agent
Count the email authentication methods on user {user_id}.
Return the number of reset emails registered for {user_id}.
GET /users/{user-id}/authentication/externalAuthenticationMethods List a user's external MFA methods · Get externalAuthenticationMethods from users #
Ask an LLM
“Which external MFA providers has a user registered for sign-in?”
“Can I see the external authentication methods linked to a user through an outside identity provider?”
Tell an agent
List the external authentication methods registered to user {user_id}.
Show all external MFA registrations for {user_id}.
POST /users/{user-id}/authentication/externalAuthenticationMethods Register an external MFA method for a user · Create externalAuthenticationMethod #
Ask an LLM
“How do I register an external MFA method for a user using an external authentication configuration?”
“Can users add their own external authentication method, or must an admin do it?”
Tell an agent
Register an external authentication method for user {user_id} using configuration {configuration_id}.
Add external MFA {display_name} with configuration {configuration_id} to {user_id}.
GET /users/{user-id}/authentication/externalAuthenticationMethods/{externalAuthenticationMethod-id} Get one external MFA method · Get externalAuthenticationMethods from users #
Ask an LLM
“What configuration is behind a specific external authentication method on a user?”
“Can I fetch a single external MFA registration by its ID?”
Tell an agent
Get external authentication method {method_id} for user {user_id}.
Show details of external MFA {method_id} on {user_id}.
PATCH /users/{user-id}/authentication/externalAuthenticationMethods/{externalAuthenticationMethod-id} Update a user's external MFA method · Update the navigation property externalAuthenticationMethods in users #
Ask an LLM
“Can I rename an external authentication method already registered to a user?”
“Is it possible to point an existing external MFA method at a different configuration?”
Tell an agent
Rename external authentication method {method_id} on user {user_id} to {display_name}.
Update external MFA {method_id} for {user_id} to use configuration {configuration_id}.
DELETE /users/{user-id}/authentication/externalAuthenticationMethods/{externalAuthenticationMethod-id} Remove a user's external MFA method · Delete externalAuthenticationMethod #
Ask an LLM
“How do I remove an external MFA method from a user's account?”
“Can a user delete their own external authentication method?”
Tell an agent destructive · confirm first
Delete external authentication method {method_id} from user {user_id}.
Remove external MFA {method_id} for {user_id}.
GET /users/{user-id}/authentication/externalAuthenticationMethods/$count Count a user's external MFA methods · Get the number of the resource #
Ask an LLM
“How many external authentication methods does a user have?”
“Is there any external MFA registered for this user?”
Tell an agent
Count the external authentication methods on user {user_id}.
Return the number of external MFA registrations for {user_id}.
GET /users/{user-id}/authentication/fido2Methods List a user's FIDO2 security keys · Get fido2Methods from users #
Ask an LLM
“Which FIDO2 security keys or passkeys has a user registered?”
“Can I list every FIDO2 key on a user's account in Entra ID?”
Tell an agent
List the FIDO2 security keys registered to user {user_id}.
Show all passkeys and FIDO2 methods for {user_id}.
GET /users/{user-id}/authentication/fido2Methods/{fido2AuthenticationMethod-id} Get one FIDO2 security key · Get fido2Methods from users #
Ask an LLM
“What are the details of a specific FIDO2 key on a user?”
“Can I look up a single passkey registration by its ID?”
Tell an agent
Get FIDO2 method {method_id} for user {user_id}.
Show the security key {method_id} registered to {user_id}.
DELETE /users/{user-id}/authentication/fido2Methods/{fido2AuthenticationMethod-id} Remove a user's FIDO2 security key · Delete fido2AuthenticationMethod #
Ask an LLM
“How do I remove a lost FIDO2 security key from a user?”
“Can I delete a passkey registration from someone's account?”
Tell an agent destructive · confirm first
Delete FIDO2 security key {method_id} from user {user_id}.
Remove the lost passkey {method_id} for {user_id}.
GET /users/{user-id}/authentication/fido2Methods/$count Count a user's FIDO2 security keys · Get the number of the resource #
Ask an LLM
“How many FIDO2 security keys does a user have?”
“Does this user have any passkey registered yet?”
Tell an agent
Count the FIDO2 methods on user {user_id}.
Return how many security keys {user_id} has registered.
GET /users/{user-id}/authentication/fido2Methods/microsoft.graph.creationOptions() Get passkey creation options for a user · Invoke function creationOptions #
Ask an LLM
“How do I get the WebAuthn creation options needed to register a passkey for a user?”
“What challenge and credential options does Entra ID return before provisioning a passkey?”
Tell an agent
Get the WebAuthn creation options for registering a passkey for user {user_id}.
Generate passkey registration options for {user_id}.
GET /users/{user-id}/authentication/methods List all of a user's authentication methods · Get methods from users #
Ask an LLM
“What sign-in methods of every type has a user registered?”
“Can I get one combined list of all authentication methods for a user?”
Tell an agent
List every authentication method registered to user {user_id}.
Show all registered sign-in methods of any type for {user_id}.
POST /users/{user-id}/authentication/methods Add a generic authentication method entry · Create new navigation property to methods for users #
Ask an LLM
“Can I create an entry directly in a user's generic authentication methods collection?”
“What fields does the base authentication method accept when created?”
Tell an agent
Create a new entry in the generic authentication methods collection for user {user_id}.
Add a base authentication method to {user_id} with created time {created}.
GET /users/{user-id}/authentication/methods/{authenticationMethod-id} Get one authentication method of any type · Get methods from users #
Ask an LLM
“How can I read a single authentication method by ID without knowing its type?”
“Which type is a given authentication method on a user?”
Tell an agent
Get authentication method {method_id} for user {user_id}.
Look up generic method {method_id} on {user_id}.
PATCH /users/{user-id}/authentication/methods/{authenticationMethod-id} Update a generic authentication method entry · Update the navigation property methods in users #
Ask an LLM
“Can I patch an entry in a user's generic authentication methods collection?”
“Which properties of a base authentication method are updatable?”
Tell an agent
Update generic authentication method {method_id} on user {user_id}.
Patch method {method_id} for {user_id} with created time {created}.
POST /users/{user-id}/authentication/methods/{authenticationMethod-id}/microsoft.graph.resetPassword Reset a user's password as an admin · Invoke action resetPassword #
Ask an LLM
“How do I reset a user's password as an administrator through Microsoft Graph?”
“Can I supply the new password myself or let the system generate one?”
Tell an agent
Reset the password for user {user_id} using password method {method_id}.
Set a new password {new_password} for {user_id} on method {method_id}.
GET /users/{user-id}/authentication/methods/$count Count all of a user's authentication methods · Get the number of the resource #
Ask an LLM
“How many authentication methods of all types does a user have in total?”
“Does a user have more than one sign-in method registered overall?”
Tell an agent
Count all authentication methods registered to user {user_id}.
Return the total number of sign-in methods for {user_id}.
GET /users/{user-id}/authentication/microsoftAuthenticatorMethods List a user's Microsoft Authenticator registrations · List microsoftAuthenticatorAuthenticationMethods #
Ask an LLM
“Which phones has a user set up with the Microsoft Authenticator app?”
“Can I list all Microsoft Authenticator registrations for a user?”
Tell an agent
List the Microsoft Authenticator methods registered to user {user_id}.
Show every Authenticator app registration for {user_id}.
GET /users/{user-id}/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethod-id} Get one Microsoft Authenticator registration · Get microsoftAuthenticatorAuthenticationMethod #
Ask an LLM
“What are the properties of a specific Microsoft Authenticator registration on a user?”
“Can I read one Authenticator app method by its ID?”
Tell an agent
Get Microsoft Authenticator method {method_id} for user {user_id}.
Show Authenticator registration {method_id} on {user_id}.
DELETE /users/{user-id}/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethod-id} Remove a Microsoft Authenticator registration · Delete microsoftAuthenticatorAuthenticationMethod #
Ask an LLM
“How do I remove the Authenticator app from a user who lost their phone?”
“Can I delete a user's Microsoft Authenticator registration?”
Tell an agent destructive · confirm first
Delete Microsoft Authenticator method {method_id} from user {user_id}.
Remove Authenticator app registration {method_id} for {user_id}.
GET /users/{user-id}/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethod-id}/device Get the device behind an Authenticator registration · Get device from users #
Ask an LLM
“Which device is the Microsoft Authenticator app installed on for a user?”
“Why is the device empty for an Authenticator registration without passwordless phone sign-in?”
Tell an agent
Get the device for Microsoft Authenticator method {method_id} of user {user_id}.
Show which phone hosts Authenticator registration {method_id} for {user_id}.
GET /users/{user-id}/authentication/microsoftAuthenticatorMethods/$count Count a user's Authenticator registrations · Get the number of the resource #
Ask an LLM
“How many Microsoft Authenticator registrations does a user have?”
“Has this user set up the Authenticator app on any phone?”
Tell an agent
Count the Microsoft Authenticator methods on user {user_id}.
Return how many Authenticator app registrations {user_id} has.
GET /users/{user-id}/authentication/operations List a user's long-running authentication operations · Get longRunningOperation #
Ask an LLM
“How do I check the status of pending authentication operations like a password reset for a user?”
“Can I list the long-running operations under a user's authentication?”
Tell an agent
List the long-running authentication operations for user {user_id}.
Show pending authentication operations for {user_id} filtered by {filter}.
POST /users/{user-id}/authentication/operations Create a long-running authentication operation · Create new navigation property to operations for users #
Ask an LLM
“Can I add a long-running operation record under a user's authentication?”
“What status fields does a new authentication operation record take?”
Tell an agent
Create a long-running authentication operation for user {user_id} with status {status}.
Add an operation record to {user_id} pointing at resource location {location}.
GET /users/{user-id}/authentication/operations/{longRunningOperation-id} Get one long-running authentication operation · Get longRunningOperation #
Ask an LLM
“Did a specific password reset operation for a user finish?”
“Can I read the status detail of one long-running authentication operation?”
Tell an agent
Get long-running operation {operation_id} for user {user_id}.
Check the status of authentication operation {operation_id} on {user_id}.
PATCH /users/{user-id}/authentication/operations/{longRunningOperation-id} Update a long-running authentication operation · Update the navigation property operations in users #
Ask an LLM
“Can I change the status of an existing long-running authentication operation?”
“Which fields of an authentication operation record are patchable?”
Tell an agent
Set the status of operation {operation_id} on user {user_id} to {status}.
Update status detail of authentication operation {operation_id} for {user_id} to {detail}.
DELETE /users/{user-id}/authentication/operations/{longRunningOperation-id} Delete a long-running authentication operation · Delete navigation property operations for users #
Ask an LLM
“Can I delete an old long-running operation record from a user's authentication?”
“How do I clear a finished authentication operation from a user?”
Tell an agent destructive · confirm first
Delete long-running operation {operation_id} from user {user_id}.
Remove authentication operation record {operation_id} for {user_id}.
GET /users/{user-id}/authentication/operations/$count Count a user's authentication operations · Get the number of the resource #
Ask an LLM
“How many long-running authentication operations exist for a user?”
“Are there any outstanding authentication operations on this account?”
Tell an agent
Count the long-running authentication operations for user {user_id}.
Return the number of authentication operations on {user_id}.
GET /users/{user-id}/authentication/passwordMethods List a user's password authentication methods · Get passwordMethods from users #
Ask an LLM
“How do I find the ID of a user's password method so I can reset it?”
“Does the password method list ever return the actual password?”
Tell an agent
List the password authentication methods for user {user_id}.
Show the password method records registered to {user_id}.
POST /users/{user-id}/authentication/passwordMethods Add a password authentication method · Create new navigation property to passwordMethods for users #
Ask an LLM
“Can I create a password authentication method on a user with an initial password?”
“What does a new password method record accept in the request?”
Tell an agent
Create a password authentication method on user {user_id} with password {password}.
Add a password method to {user_id}.
GET /users/{user-id}/authentication/passwordMethods/{passwordAuthenticationMethod-id} Get one password authentication method · Get passwordMethods from users #
Ask an LLM
“When was a user's password method created?”
“Can I read a single password method by its ID?”
Tell an agent
Get password method {method_id} for user {user_id}.
Show password method record {method_id} on {user_id}.
GET /users/{user-id}/authentication/passwordMethods/$count Count a user's password methods · Get the number of the resource #
Ask an LLM
“How many password methods does a user have registered?”
“Is there a password method on this user at all?”
Tell an agent
Count the password methods on user {user_id}.
Return the number of password records for {user_id}.
GET /users/{user-id}/authentication/phoneMethods List a user's phone authentication methods · Get phoneMethods from users #
Ask an LLM
“Which phone numbers has a user registered for MFA or SMS sign-in?”
“Can I see a user's mobile, alternate mobile and office phones used for authentication?”
Tell an agent
List the phone authentication methods registered to user {user_id}.
Show all authentication phone numbers for {user_id}.
POST /users/{user-id}/authentication/phoneMethods Add a phone authentication method · Create phoneMethod #
Ask an LLM
“How do I add a mobile number to a user for MFA in Entra ID?”
“Can a user have two phones of the same type registered?”
Tell an agent
Add phone number {phone} as a {phone_type} authentication method for user {user_id}.
Register mobile number {phone} for MFA on {user_id}.
GET /users/{user-id}/authentication/phoneMethods/{phoneAuthenticationMethod-id} Get one phone authentication method · Get phoneMethods from users #
Ask an LLM
“Is SMS sign-in enabled on a particular phone method for a user?”
“Can I read one registered phone number by its method ID?”
Tell an agent
Get phone method {method_id} for user {user_id}.
Show the phone number and SMS sign-in state of method {method_id} on {user_id}.
PATCH /users/{user-id}/authentication/phoneMethods/{phoneAuthenticationMethod-id} Change a user's authentication phone number · Update phoneAuthenticationMethod #
Ask an LLM
“Can I change the number on an existing phone authentication method?”
“Why can't I switch a phone's type when updating it?”
Tell an agent
Change phone method {method_id} on user {user_id} to number {phone}.
Update the registered number for {user_id} method {method_id} to {phone}.
DELETE /users/{user-id}/authentication/phoneMethods/{phoneAuthenticationMethod-id} Remove a phone authentication method · Delete navigation property phoneMethods for users #
Ask an LLM
“How do I remove an old phone number from a user's MFA methods?”
“Can I delete a registered authentication phone for someone?”
Tell an agent destructive · confirm first
Delete phone method {method_id} from user {user_id}.
Remove the authentication phone number {method_id} for {user_id}.
POST /users/{user-id}/authentication/phoneMethods/{phoneAuthenticationMethod-id}/microsoft.graph.disableSmsSignIn Turn off SMS sign-in for a phone · Invoke action disableSmsSignIn #
Ask an LLM
“How do I stop a user from signing in with a text message code on their mobile?”
“Can I disable SMS sign-in without deleting the phone number?”
Tell an agent
Disable SMS sign-in for phone method {method_id} on user {user_id}.
Turn off text-message sign-in on {user_id}'s phone {method_id}.
POST /users/{user-id}/authentication/phoneMethods/{phoneAuthenticationMethod-id}/microsoft.graph.enableSmsSignIn Turn on SMS sign-in for a phone · Invoke action enableSmsSignIn #
Ask an LLM
“How can I let a user sign in with just their mobile number and an SMS code?”
“What conditions must be met before SMS sign-in can be enabled on a phone?”
Tell an agent
Enable SMS sign-in for phone method {method_id} on user {user_id}.
Let {user_id} sign in with an SMS code sent to mobile method {method_id}.
GET /users/{user-id}/authentication/phoneMethods/$count Count a user's phone authentication methods · Get the number of the resource #
Ask an LLM
“How many phone numbers does a user have registered for authentication?”
“Has this user registered any authentication phone?”
Tell an agent
Count the phone methods on user {user_id}.
Return the number of authentication phones for {user_id}.
GET /users/{user-id}/authentication/platformCredentialMethods List a user's macOS platform credentials · Get platformCredentialMethods from users #
Ask an LLM
“Which Mac platform credentials has a user registered?”
“Can I list Platform SSO credentials a user has on macOS?”
Tell an agent
List the platform credential methods registered to user {user_id}.
Show all macOS platform credentials for {user_id}.
GET /users/{user-id}/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethod-id} Get one macOS platform credential · Get platformCredentialMethods from users #
Ask an LLM
“What are the details of a specific Mac platform credential on a user?”
“Can I read one platform credential registration by its ID?”
Tell an agent
Get platform credential method {method_id} for user {user_id}.
Show macOS credential {method_id} registered to {user_id}.
DELETE /users/{user-id}/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethod-id} Remove a macOS platform credential · Delete platformCredentialAuthenticationMethod #
Ask an LLM
“How do I remove a platform credential from a user's retired Mac?”
“Can I delete a user's macOS platform credential registration?”
Tell an agent destructive · confirm first
Delete platform credential method {method_id} from user {user_id}.
Remove the Mac platform credential {method_id} for {user_id}.
GET /users/{user-id}/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethod-id}/device Get the Mac behind a platform credential · Get device from users #
Ask an LLM
“Which Mac device does a user's platform credential live on?”
“Can I see the registered device for a platform credential method?”
Tell an agent
Get the device for platform credential {method_id} of user {user_id}.
Show which Mac holds platform credential {method_id} for {user_id}.
GET /users/{user-id}/authentication/platformCredentialMethods/$count Count a user's macOS platform credentials · Get the number of the resource #
Ask an LLM
“How many Mac platform credentials does a user have?”
“Does this user have any platform credential registered?”
Tell an agent
Count the platform credential methods on user {user_id}.
Return the number of macOS credentials for {user_id}.
GET /users/{user-id}/authentication/softwareOathMethods List a user's software OATH TOTP apps · Get softwareOathMethods from users #
Ask an LLM
“Which third-party authenticator apps generating TOTP codes has a user registered?”
“Can I list the software OATH tokens on a user's account?”
Tell an agent
List the software OATH methods registered to user {user_id}.
Show all TOTP authenticator apps for {user_id}.
GET /users/{user-id}/authentication/softwareOathMethods/{softwareOathAuthenticationMethod-id} Get one software OATH TOTP app · Get softwareOathMethods from users #
Ask an LLM
“What are the details of a specific TOTP app registration on a user?”
“Can I read one software OATH token by its ID?”
Tell an agent
Get software OATH method {method_id} for user {user_id}.
Show TOTP app registration {method_id} on {user_id}.
DELETE /users/{user-id}/authentication/softwareOathMethods/{softwareOathAuthenticationMethod-id} Remove a software OATH TOTP app · Delete softwareOathAuthenticationMethod #
Ask an LLM
“How do I remove a TOTP authenticator app from a user?”
“Can I delete a user's software OATH token registration?”
Tell an agent destructive · confirm first
Delete software OATH method {method_id} from user {user_id}.
Remove TOTP app {method_id} for {user_id}.
GET /users/{user-id}/authentication/softwareOathMethods/$count Count a user's software OATH TOTP apps · Get the number of the resource #
Ask an LLM
“How many software OATH tokens does a user have?”
“Has this user registered any TOTP app?”
Tell an agent
Count the software OATH methods on user {user_id}.
Return the number of TOTP apps for {user_id}.
GET /users/{user-id}/authentication/temporaryAccessPassMethods List a user's Temporary Access Passes · List temporaryAccessPassMethods #
Ask an LLM
“Does a user currently have a Temporary Access Pass?”
“Why does the Temporary Access Pass list only ever return one item?”
Tell an agent
List the Temporary Access Pass methods for user {user_id}.
Show any Temporary Access Pass issued to {user_id}.
POST /users/{user-id}/authentication/temporaryAccessPassMethods Issue a Temporary Access Pass to a user · Create temporaryAccessPassMethod #
Ask an LLM
“How do I issue a Temporary Access Pass so a new employee can onboard passwordless?”
“Can I make a Temporary Access Pass single-use and set how many minutes it lasts?”
Tell an agent
Create a Temporary Access Pass for user {user_id} valid for {minutes} minutes.
Issue a one-time Temporary Access Pass to {user_id} starting at {start}, single use {once}.
GET /users/{user-id}/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethod-id} Get one Temporary Access Pass · Get temporaryAccessPassAuthenticationMethod #
Ask an LLM
“Is a specific Temporary Access Pass still usable and when does it start?”
“Can I read one Temporary Access Pass by its ID?”
Tell an agent
Get Temporary Access Pass {method_id} for user {user_id}.
Show the usability and lifetime of pass {method_id} on {user_id}.
DELETE /users/{user-id}/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethod-id} Revoke a user's Temporary Access Pass · Delete temporaryAccessPassAuthenticationMethod #
Ask an LLM
“How do I revoke a Temporary Access Pass before it expires?”
“Can I delete a user's Temporary Access Pass so I can issue a new one?”
Tell an agent destructive · confirm first
Delete Temporary Access Pass {method_id} from user {user_id}.
Revoke the Temporary Access Pass {method_id} for {user_id}.
GET /users/{user-id}/authentication/temporaryAccessPassMethods/$count Count a user's Temporary Access Passes · Get the number of the resource #
Ask an LLM
“How many Temporary Access Pass methods does a user have?”
“Is there any Temporary Access Pass registered on this account?”
Tell an agent
Count the Temporary Access Pass methods on user {user_id}.
Return the number of Temporary Access Passes for {user_id}.
GET /users/{user-id}/authentication/windowsHelloForBusinessMethods List a user's Windows Hello for Business keys · List windowsHelloForBusinessAuthenticationMethods #
Ask an LLM
“Which Windows Hello for Business keys has a user registered?”
“Can I list a user's Windows Hello sign-in registrations across devices?”
Tell an agent
List the Windows Hello for Business methods registered to user {user_id}.
Show all Windows Hello keys for {user_id}.
GET /users/{user-id}/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethod-id} Get one Windows Hello for Business key · Get windowsHelloForBusinessAuthenticationMethod #
Ask an LLM
“What is the key strength of a specific Windows Hello for Business registration?”
“Can I read one Windows Hello key by its ID?”
Tell an agent
Get Windows Hello for Business method {method_id} for user {user_id}.
Show Windows Hello key {method_id} on {user_id}.
DELETE /users/{user-id}/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethod-id} Remove a Windows Hello for Business key · Delete windowsHelloForBusinessAuthenticationMethod #
Ask an LLM
“How do I remove a Windows Hello for Business key from a decommissioned PC?”
“Can I delete a user's Windows Hello registration?”
Tell an agent destructive · confirm first
Delete Windows Hello for Business method {method_id} from user {user_id}.
Remove Windows Hello key {method_id} for {user_id}.
GET /users/{user-id}/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethod-id}/device Get the PC behind a Windows Hello key · Get device from users #
Ask an LLM
“Which Windows device holds a user's Windows Hello for Business key?”
“Can I see the registered device for a Windows Hello registration?”
Tell an agent
Get the device for Windows Hello method {method_id} of user {user_id}.
Show which PC holds Windows Hello key {method_id} for {user_id}.
GET /users/{user-id}/authentication/windowsHelloForBusinessMethods/$count Count a user's Windows Hello for Business keys · Get the number of the resource #
Ask an LLM
“How many Windows Hello for Business keys does a user have?”
“Has this user enrolled Windows Hello on any device?”
Tell an agent
Count the Windows Hello for Business methods on user {user_id}.
Return the number of Windows Hello keys for {user_id}.

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/graph/api/overview
📖
Authentication
https://learn.microsoft.com/en-us/graph/auth/
📖
Documentation
https://learn.microsoft.com/en-us/graph/change-notifications-overview

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-users-authentication-api-openapi.yml

Other Resources

🔗
SDKs
https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
🔗
ChangeLog
https://developer.microsoft.com/en-us/graph/changelog
🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/asyncapi/azure-ad-change-notifications-webhooks.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/azure-ad:azure-ad-users-authentication-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

azure-ad-users-authentication-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Identity.SignIns Users.authentication API
  version: v1.0
servers:
- url: https://graph.microsoft.com/v1.0/
  description: Core
security:
- azureaadv2: []
tags:


# --- truncated at 32 KB (142 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-users-authentication-api-openapi.yml